@skasai In addition/instead of using iptables once could restrict nfs access on the nfs share level too. I understand you have a working build so don’t change just because of this, but be aware that with NFS v3 you can restrict mounting the NFS share based on ip address/subnet range.